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Filed: April 6, 2001 



Art Unit: 2135 
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Title: AUTHORIZATION USING CIPHERTEXT TOKENS 

DECLARATION UNDER 37 CJF.R. § 1.131 

Mail Stop Amendment 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Sir, 

I, Eric J. Sprunk, hereby declare as follows: 

1. I am the named and true inventor in the above referenced patent application and 
that I am the sole inventor of the subject matter disclosed and claimed in the above 
referenced patent application, 

2. I submitted a description of my invention, now claimed in claims 1-7 and 1 1-14 
of the above application, to the law department of General Instrument Corporation in an 
"Invention Record Form." I signed the Invention Record Form on October 5, 1999 and 
the signatures on the Invention Record Form are my own. A copy of the Invention 
Record Form is provided with this declaration as Attachment A. General Instrument 
Corporation Invention Record Form No. D023 1 6CIP4. 
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3. I conceived the invention recited in claims 1-7 and 11-14 of the above application 
prior to June 2, 1998. The conception of the invention prior to this date is attested to in 
paragraph 111(9) of the aforementioned General Instrument Corporation Invention Record 
Form No. D02316CIP4, and evidenced by the June 2, 1998 General Instrument 
Memorandum entitled "Application Security for TCI". This memorandum was 
referenced in and physically attached to General Instrument Corporation Invention 
Record Form No. D02316CIP4 when the form was witnessed by Alexander Medvinsky, a 
General Instrument Corporation employee, on November 5, 1999, See Attachment A. 

4. I constructively reduced my invention to practice prior to June 2, 1998, and this 
reduction was memorialized in the aforementioned "Application Security for TCI" 
memorandum. This memorandum was provided to fellow General Instrument employees 
Paul Moroney, Gary Albeck, B. Meandija, Petr Peterka, Xin Qui, Stuart Moskovics, 
Steven Anderson, K. Miller, J. Fellows, Annie Chen, Lawrence Tang, Mark DePietro, 
Douglas Makofka, Reem Safadi, and Lawrence Vince (a$ evidenced by the distribution 
list on the face of the memorandum). 

5. Upon information and belief, the date of receipt of General Instrument 
Corporation Invention Record Form No. D02316CIP4 by the General Instrument 
Corporation law department was October 8, 1999, as evidenced by the "General 
Instrument Corporation Intellectual Property" date stamp on the first page of Attachment 

A. 

6. I hereby declare that all statements made herein based upon knowledge axe true, 
and that all statements made based on upon information and belief are believed to be 
true,. These statements were made with the knowledge that willful false statements and 
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tha like made are punishable by fine or imprisonment, or both, wider § 1001 of Title 
18 of the United Stales Code, and that such willful falsa statements miy jeopardize the 
validity qf the application or any patent issued thereon. 



Dated: £■? Ta/> 2-0O£ 
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APPENDIX A 

General Instrument Corporation Invention Record Form No. D02316CIP4 
Inventor: Eric J. Sprunk 
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H. Background Infbnnaiion 
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Iftventiop Record Form 



9, i&b&fitt&yptfttf*. publications, artfcfa, teaca, pf Q &ffJk , ^w^^d0scr&c technoic^szn^^ 
todhrdtoqyvfytt aMcaraJe^eettfmst^ toes* 
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lit Description of the Invention 

1 PSaasa prow* a v*y ixwf (jl* . one short **fi«x»> sutwowy ^ jrwcnSoit.. , , „ 



.j~r^t^ - v <^ J1 r~ — ^ - * > 
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Invention Record Form 



yourinva^ittpwsWJftfl^to An ttetf dtscfasune deserto fee 

raecftancaf 4ra^ngs # ptofc>#aph^ sic J art* any retevfrtt qnq fr ew ft g <#>ectttary mfafcooic fiqqct> ctpor^ 
rewrite & Sta^es4ad*3actf *^«fK»a^y^ 

pafle e^gibwtsriag progre^tepcrtBtfctasai 50 Jchfl £)m dated 1 Jan., i$32 tar d«*cripfo* aijp^ataan 






















if i 












oat* V 



Gl CONF10EW1AL * PROPRIETARY 



Osttt 
Rev 



PAGE 24/30 ' RCVD AT 1127/2006 4:39:17 PM [Eastern Standard Time] ' SVR:USPTO<EFXRM/25 * DNlS:2738300 ' CSID:2153231300 ' DURATION (mm-ss):06-54 



JAN-27-2006 16=42 MOTOROLA CHS LAW DEPT 2153231300 P. 25 

U.S. Serial No.: 09/827,630 

Memorandum General Instrument la:S M* 



OWtt Jum219SS 
Subject; Ap?lk»&Ki Serarity for TCI 
F**m: BhcSprunk 
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1,, tafcr?»4^rtw?» - — *. v.. ... . v-v — .^^^.^.Hr. i,.* t 

LI Acronyms & AbbrWrtOTton* 2 
2L See^ty Swirmafeftts w — —^..^ 4 



21 The Vfej©o Sfen^ Security M«W* 
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22 Applcarion Swurfif 






ThA Level* qf Apptttitsan Security * ^ „♦„ 
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31 Love* &^rypred Appfecfon Dowttood 
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3.4 tevel 4: Aumcm«d ItfuftCft 
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3 a Level & ACFSx&cuftrt fokfe* 
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S- iii i l^ty — ., .** M.«vph^.. M «. «... .•t-i — L . i . , ., -f w ... U, 



1. Introduction 

This ma» ptwtta buekfannd to faefigtut* di*d«fioj^dTCIrtqttkc^fc»f«d(H^w^ 



1 



CONFIDENTIAL. 
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1,1 Acronyms & Abb^viofions 

ACP Aeefts* Coabnjl Ptaaww 

App AppHcafciim 

BIOS Bufit*i& Op«*4&*i Sfstxstt. 

CA Ckrodftuaal Mem C*rti&Ktf» AtiShmiter 

EMM E£E^me^M*Q2g^^ 

ECBS Skfefefeiacpt Coa&vl Data, St«Ktt» 

$CSf Esdttectftnt CwirtJ Hessagt 

ET Ew^t^lbkAft 

JVM J*rmir^ca^M*dskw 
OS Opc?A&&ff$y*tett 

2, Security Errvtr orwDenfs 

2.1 Thd Video Seivice Secuniy Model 

A vito service i* * Sfcffw*** 
* Tb* eaorflJted ftrwa is rwt*4 fcfcwqjfe *a Acce»CirtatolP»c«^(iA^ security tovfer 

* SCM £sfom*Hoa putts d**» cfctcfei (or * r pWfrfrffnE * *p*«flc dtr 

Tfcu* jstaHg&ea* of &■ ACP ia gtrtes with ita data patb is crucial, as &b maka* jfa "galtkofper'" 
few&ttA&7;e99?tte Wot ^AGF^& www data 

Tfritfc Cradstiroal AtottBS, 

it r *r^t j»jsibk to clear <isdi <£ewu*±TOta& of &e AC?, mi &i*ta«tewfc o*a<AG? cisMi&y 
wffi^^^dpmt^VMib^UBV^^ with t&« eicgpttoa miagf taogity e^gda igiiTn^ iifca 
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atzt&iz &« A CP craw* bfcdftpmdctl cpa*. to fimet setut&y Suctions 

$ed^fts&fi(ur&&ian s*eis H tttttrcl tfec «iire datesrttiaw 44 fit first objective **4 * <Svte jietaaf 
diti tei tka£ date strew ( e* * jprfctf&Ua) 4 mred dtg^fciv*. Th* afca&r to du this aftcs 
the ctfacimtous writs of d&da pexikzwei «ck prajnan* *Hcb c&di pCOTfcf** ^pGTbiajty (0 
&£ige 1 key a* tier date* awc&itad wftfa tt» 

AC? tint *&£typt& th« s*rvkt, than a ACP Sias cbefcx but to th# wsm to *eo7pt 

BttfaapwSfk program^ £f ttv^t tfet AC? gaifegg tiyrftipta to^tcrypfrthAt 

pirtgr^, riira ail aHUty to oWrf £f 
thai d&ar pragraaa is atmd f*a 1 p^n^nrjy lagg* sstdia), cLea it wfll be fcVaflttfefo for* v*t Asuj* 
from 6c jo$±Uik UsiAv»fljb^t7 

axpoisihi* 1* rw&vgf ospyi tat, Coarapttoti^,. post-AC? i»J*<rt£fciL of d**r *f4*6 dtf* wiE b* 
lu^cftssful wh*tb*r «r» rcea rf±<i Jwm wtter d euy^U oa -jx frra towwcucrTptad 

2-2 Application SecurUy 

As fc^totiOT to "App^ 

vi^type*A£ifet^trea&W However, 

u-nun iMbpi for a my fttttnr flrfffrtffi rrrp^*** 4*fl rffr-fa^Hma, *eaf^ iidMch teads to be 
icacrt ^ydfe-*** 

though fchis »*7 be posiibU mat day fer * fcnr s*teop. Until socfa a c&p stttfcp" V3*st&» tnw 
S*ctariif fcedbaJquiei wiB c»ftd^ teiftftiwitkAppa. tfcKalaot^ vu&ditat for aq AC?taaerv« 

azt^sM of ACfP wera^ to 

«TcAtfotwArf, odol cansalETatim af wjuffco«ta, the jptwtkalrty of 4Ti2aite nwwntr 

ucertef b^Stiy aa4 Ucai£*iKto S«M Aj^«tcnrity pxtAtons w* v«ty difficult 

ts cran^r ^fithoat had tipugmrt ^K^^tat i^rt5 A H^ftnYftriffl^ ^ aa4 pa&tibte 
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1ml security pals for &« 50CO Tb*d*fiaftwafe^r«^^ 

1 The Levels of Application Security 

T$t st&gle high, liviE rtq^ttttft^t te 4 ^ari- Application can readily be r*aoLv#d mh* * cAHoberaf 

irid&aur gstgtvtgng a*cu£tJy <raisia* fcbft ACT Partiwr. » Siut^rotat Central &aia5l*ufftur& 1 
(SCDS) appeo&bd tae^J^jpias^riforiayAat^^ SiacBoaa to ae&ca, aand tactod** a 

&9**ic*A df a Ap<p«r Jb tCOS fer «tcttrit^ p*scp&$es* It is ai»a«0G$*ary fc&dfc^^ 
uuijid (attach of ah App from its ctotSBBros «JC*catka &ft*rw*rdfr Ttw* po&ab&ti** are fiS 

E&tittd&s aid technique* aa4 profcsctiaaa described SorLmb L, 2,artd3 

3.1 level 1: Enciypted Application Download 

wt&£4 th* zrtcjtctiDn ofdats ^veefy mtoAp? w^ory $P £c*fc 

b>*vidto stream., ThfcApp stfrtaia mybc iabi^ddr oerefb^^ bat ii^hfc^p^ placate « 

tft^ l w ?^ to indi^Mfttl Wfttep* '& to cod v«y nwryjtfad App t&t&twtntff Aft 

the «w*7pt*d A^p p*iS6i ftwtst ACP 5 « fcb* aarasa] 3&mn€T< wd d*e?yp*tei occcr* a*J/ if 

3.2 Uvet 2: Download Aufhenficaflon 



toy AC? to *satoiai &tf i?«g& Apt 
tttB^ iff W ^ ^ aaba^ 

5 ?©rrr*** Ajtv-J*^ 5i» 4 ftrS flrf Aosfaiiwwacifiwft, <*fatf>oa>y tf^ ^i p j rqf fear ^ m i , jH \ \ \ m X*f*m ftfl tt 
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A &g£U! *£$ttfeix* is tbt way flf achieving thii, vitb * wrtwmfc dpftrtfcar caatrtsS ca&£«t*r 

having the k«y dUI tt**£fc* rtuk uS|n»Gr*l Either sjrasiti^fcg: DSS tattdl « isyetiMerie Ci g 
ftSAacDSAar ECCba«fd)4%9iix^ best 
»lut£e&. 1^ choice tfMTP^*^ 

tirawb& «jd other c9BsSd*r*iiaBS aot discussed is tbas icc&so* 

IVnmc yg fr'™^******^ t^W^* ***** a^rm Aa pTwriffH^i^ *Tfrrfjff ^Mwh tiw 
«^^Qt«oqr^!**«Is. Tbtw ire flsnimtTOtsd actions bttem Appivttaion Security Uvtt 2 cxl? 

Sac* App sigMtKr* yggaftairftttt is stoat fctgcaggfefr ftotad &q&origiftffl>, ji q»a$fc ocrer 
the ACP- Sjgaafcare WtSfrfttlOfl frft AC? riafp Sabgaiatg the fcctr^ vmrr tefrtal qf ttfgh «ttd 

t*<£2ir«tt«at for lUbani Pith c*p*fe2i£y S*tf±cp&^tfeb^5Forptoa* 

canae* fe# ffiteitorfcd fit? App *ewErity1>*k**i*ti *ad ttrpr*^fc*hjebsrl*v#I Rile 5 

Tlte to^da«*tiott cf Aiattetoto Current 
Iffprearbtry* to An^mtiffttiTO hff»¥ tit* 0$ ****** juMfew^g <Mwfiftfttt*ft **** Kalar^teftat itL th# 
evrot <tf Mute. This is bregma sh« svozn^r bantfit of AetJwctiatfau b ishrtt&cty dffpf&dtat upon 
fcb* bust Iml si ft* OS. Om mJ^t tHak w AC? c*a block e**cu?teft at as Aw by tk* OS, but 

tixtt»tata aa. Att&sKflCitaiiai. tben Chart is twttw&ff wwtsoe vcr that tlte ACP oa cfe about it 

t wiring c&rz39 in this dzscassiccu and wiK be retoraad w *£&bd ia a roh$eqg£at sccooc 

3.3 level 3: Authenticated Launch 

Am h ti tirctfrf Lmvurh ft the j^qfrm vfexaeuiiesk (?fan ^pp ^ &S only ifiiitmmcrk 

THsltv«l is wbert ctw Asitk*tttic*ticn<i«fi»*d t& tbft prtvwmfl ssftcti^o xi verified OS,, ctiay cfa* 

mast net ei^fr tfat App untS iheACPhjtf 
2. Tfet ACP6>m*thtMmwAtti^tirt^ 
3 Th*CSs*p*nkfr^s tb*A^ 



* TifLi uufl ilufc u j ' J i , i " 1 fa t, fflcW T*r " fc "T Ttii ntti lift -m i rf *i rr^f rff [r^*^^ MSm^ 
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4. Tb* ACS? dttdd £f£i$i sjig&A&x?*, mp«Kfcf witbi VER2FSES0 $ r FaH£D 

1 tf Vg&ISIED,, tb* OS iaitos tjfcttrticm of ih* App, 

6. if ftftttJED, tte ^«*5*s from ttfttitttibfa afesftny 

3.4 level 4: Aiibottred Launch 

Authority* T^tiit* 

efttryptie* fay* ^sd fnJ&opercfe CH ft e gw rsra f by tk&t &pmfic ACP 

Artborixsttiaa of l*nnA tin to ftdxterod by At least two *ppo»cb*& witk 4i5brtat iertlj of 
practicality As App to *2w*y* stomi *Ktbtt£e*t*£ Stri, but it torc^d bfc tfbted tit&»r n* 

e^cry^d fcr^ wiad*^&^ f {Note £f to 

dmtf download aw be fcb*i*i»d,) EfAppgart stored eao7ptw$ f t^«^b* d*c*>pt^c© 
L tit«OSlMd«flAppditi into tktACP 

3 the ACf hand *0d«#ptri 

Tbi secuRX7 benefit of «tt»»d rtflx*pt is d*jwa4*&t 9gm &c ca&tfetttt tf AtttfewtfcaBasx: 
* t A^thMttirr^ , ^gi^ryy^ pr»w*tLtai i^j^gtim ofTjp^w™ 1 ^ A FF* ^ 

» ttrfrh ftrrtfrfnlifftffift j*— •pcrypt*ti stay kiavaiu* ggfry if&«<3[3 ratoiAlimitk* 
Birt this tj a frirgtrsrtSctitfft H 'far PS fo * 7 $t*n*±*A &wrt^fte*ifoft fafl ^crpptaat 

ist ftvftkuf*ta$ App <*a=£tj* AiSMflt po**ibi* App security fi*£t$ if the OS i* not trvttiMarih?, 
SoczTptai stores* & a&t r*ewfcto*ttd*S» *isaasifcg (srart^fribtt) AttftferoHnrHrnr fcat pt««(t 

Assu&tz^ a* «oe??p^ rtm*^ 

& TteACPdtod»vl*«tefcj***^^ 

AythTO^^TT Both Att^bratJu^ acd .Uitboraac^ dutck± aim -octwr before iafctfeb* but a 
w^iA otidx? la jpsflrtKat, Au&wdettioii wilt require esuA toor* t* perform &*& A*iti»rttad;r. 
*o deten&iz^ca of NOT AUT^ORIZEP sfitm &$ &swt £ wt&c*±aiiAtt is Aift* Sm 
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